Latest zohocorp manageengine eventlog analyzer Vulnerabilities

● CVE-2023-35785

Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6993 and below and 7xxx 7002 and below, Cloud Security Plus 4...

Zohocorp Manageengine Ad360<4.3

Zohocorp Manageengine Ad360=4.3-4300

Zohocorp Manageengine Ad360=4.3-4302

Zohocorp Manageengine Ad360=4.3-4303

Zohocorp Manageengine Ad360=4.3-4304

Zohocorp Manageengine Ad360=4.3-4305

and 229 more

● CVE-2021-28959

Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory traversal via an entry in a ZIP archive. This leads to remote code execution.

Zohocorp Manageengine Eventlog Analyzer<12.1.4

Zohocorp Manageengine Eventlog Analyzer=12.1.4

Zohocorp Manageengine Eventlog Analyzer=12.1.4-12141

Zohocorp Manageengine Eventlog Analyzer=12.1.4-12145

Zohocorp Manageengine Eventlog Analyzer=12.1.4-12146

● CVE-2020-24786

An issue was discovered in Zoho ManageEngine Exchange Reporter Plus before build number 5510, AD360 before build number 4228, ADSelfService Plus before build number 5817, DataSecurity Plus before buil...

Zohocorp Manageengine Adselfservice Plus<=5.7

Zohocorp Manageengine Adselfservice Plus=5.8

Zohocorp Manageengine Adselfservice Plus=5.8-5800

Zohocorp Manageengine Adselfservice Plus=5.8-5801

Zohocorp Manageengine Adselfservice Plus=5.8-5802

Zohocorp Manageengine Adselfservice Plus=5.8-5803

and 146 more

● CVE-2014-6038

Zohocorp Manageengine Eventlog Analyzer>=7.0<=9.9

● CVE-2014-6039

ManageEngine EventLog Analyzer version 7 through 9.9 build 9002 has a Credentials Disclosure Vulnerability. Fixed version 10 Build 10000.

Zohocorp Manageengine Eventlog Analyzer>=7.0<=9.9

● CVE-2019-19774

An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetails from hostdetails" at the /event/runquery.do endpoint, it is possible to bypas...

Zohocorp Manageengine Eventlog Analyzer>=10.0<12.1.1

● CVE-2019-12133

Multiple Zoho ManageEngine products suffer from local privilege escalation due to improper permissions for the %SYSTEMDRIVE%\ManageEngine directory and its sub-folders. Moreover, the services associat...

Zoho ManageEngine=1.0

Zohocorp Manageengine Browser Security Plus

Zohocorp Manageengine Desktop Central=10.0.380

Zohocorp Manageengine Eventlog Analyzer=12.0.2

Zohocorp Manageengine Firewall=12.0

Zohocorp Manageengine Key Manager Plus=5.6

and 12 more

● CVE-2018-10076

An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting vulnerability allows a remote attacker to inject arbitrary web script or HTML via the search functionality ...

Zohocorp Manageengine Eventlog Analyzer=11.12

● CVE-2018-10075

Cross-site scripting (XSS) vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature.

Zohocorp Manageengine Eventlog Analyzer=11.12

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.